Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ejNU45tLgjTKspmgPgEr9RXAJVg.roa
File: ejNU45tLgjTKspmgPgEr9RXAJVg.roa (raw, json)
Hash identifier: b51UQNMNJY/j4ci3KBb2+M6LDu9OP9V2S72vTQWJZfE=
Subject key identifier: 7A:33:54:E3:9B:4B:82:34:CA:B2:99:A0:3E:01:2B:F5:15:C0:25:58
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B97E7D8F0D29B09A99A50461A6E776392
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ejNU45tLgjTKspmgPgEr9RXAJVg.roa
Signing time: Sat 04 Nov 2023 01:17:15 +0000
ROA not before: Sat 04 Nov 2023 01:17:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:97:e7:d8:f0:d2:9b:09:a9:9a:50:46:1a:6e:77:63:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 4 01:17:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a3354e39b4b8234cab299a03e012bf515c02558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:25:a8:98:f4:14:dd:e1:c7:2c:42:b4:2d:7e:
09:50:ac:a6:fb:3b:75:c6:f6:24:6a:23:32:50:1e:
cf:33:1f:93:c4:c1:a0:3f:58:3b:4d:22:a7:e5:41:
52:95:11:ad:21:e5:df:32:05:be:ca:a7:42:26:94:
2d:81:05:7a:7c:0f:65:87:e8:c0:a8:f5:c4:41:ea:
69:1b:e1:5d:49:30:24:0c:07:ee:62:34:60:2a:04:
5f:a6:60:c0:d6:80:bc:ca:07:da:06:0a:97:6d:89:
a5:88:69:4d:69:d8:45:5c:3e:92:b1:6a:81:b0:be:
fc:9d:58:48:77:34:a8:ee:19:fd:44:4b:cf:c7:7b:
c8:02:f2:8a:83:a6:e3:bf:43:a6:c0:fa:70:e0:b6:
b1:1b:8e:ba:1d:8c:c8:de:07:87:d4:05:70:a5:4b:
53:05:9e:2a:2e:24:da:36:60:b4:4a:8f:53:c0:50:
59:39:f5:37:1d:31:d9:f5:dc:84:0f:b1:22:57:f7:
a0:aa:3a:ea:0e:c0:04:4d:5d:f2:8e:88:42:0f:21:
7c:6f:10:e1:63:38:db:7d:8a:26:3f:3d:f2:7e:0b:
be:51:30:9a:dd:f6:75:f2:7c:fc:4b:59:85:9b:a9:
a9:00:67:bb:5e:02:10:a3:a0:d3:4a:34:67:50:79:
b3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:33:54:E3:9B:4B:82:34:CA:B2:99:A0:3E:01:2B:F5:15:C0:25:58
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ejNU45tLgjTKspmgPgEr9RXAJVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
cc:16:6f:81:96:cd:69:03:c7:76:83:21:b8:1a:fb:66:f2:55:
80:9b:bf:11:e3:db:74:13:e6:b4:52:05:09:49:85:17:84:8d:
dc:90:91:3d:94:96:af:3d:f5:e4:f7:73:19:89:bb:6c:8c:59:
fd:4a:b6:e8:75:4e:f6:f7:8f:08:33:6a:c7:6a:74:bf:07:d6:
62:03:02:1a:ff:b7:89:37:f2:b3:67:50:ee:af:81:17:1e:87:
f5:86:34:3e:c9:2b:ec:05:b9:4f:7b:9b:1b:7e:d3:04:22:5d:
e9:ea:fc:4d:65:fc:0e:34:c3:26:83:78:7f:3f:40:05:40:fe:
d3:dc:b4:56:91:8c:81:80:40:ac:1f:a3:aa:b6:5f:a7:8d:26:
58:a9:5b:e7:53:95:db:e3:40:49:9c:d6:d3:c8:79:99:aa:6c:
f2:91:9e:c1:e0:0b:11:33:84:f7:86:5e:2a:e4:78:e4:86:4f:
bf:57:16:21:9f:2e:04:8b:a7:91:41:a7:cd:b7:32:4c:22:db:
52:6e:94:9f:af:9a:ac:f3:f1:d7:f2:95:d3:53:58:b3:34:2c:
92:4a:ff:e9:60:5a:da:5e:eb:66:d7:1c:5c:fc:73:5b:52:fc:
16:3a:37:a3:42:e9:f2:63:3b:86:bb:9f:65:64:63:4d:01:ee:
f7:78:d0:72
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYuX59jw0psJqZpQRhpud2OSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTA0MDExNzE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTMzNTRlMzliNGI4MjM0Y2FiMjk5YTAzZTAxMmJmNTE1YzAyNTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SWomPQU3eHHLEK0LX4JUKym+zt1
xvYkaiMyUB7PMx+TxMGgP1g7TSKn5UFSlRGtIeXfMgW+yqdCJpQtgQV6fA9lh+jA
qPXEQeppG+FdSTAkDAfuYjRgKgRfpmDA1oC8ygfaBgqXbYmliGlNadhFXD6SsWqB
sL78nVhIdzSo7hn9REvPx3vIAvKKg6bjv0OmwPpw4LaxG466HYzI3geH1AVwpUtT
BZ4qLiTaNmC0So9TwFBZOfU3HTHZ9dyED7EiV/egqjrqDsAETV3yjohCDyF8bxDh
YzjbfYomPz3yfgu+UTCa3fZ18nz8S1mFm6mpAGe7XgIQo6DTSjRnUHmzjwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHozVOObS4I0yrKZoD4BK/UVwCVYMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvZWpOVTQ1dExnalRLc3BtZ1BnRXI5UlhBSlZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAMwWb4GWzWkDx3aDIbga
+2byVYCbvxHj23QT5rRSBQlJhReEjdyQkT2Ulq899eT3cxmJu2yMWf1Ktuh1Tvb3
jwgzasdqdL8H1mIDAhr/t4k38rNnUO6vgRceh/WGND7JK+wFuU97mxt+0wQiXenq
/E1l/A40wyaDeH8/QAVA/tPctFaRjIGAQKwfo6q2X6eNJlipW+dTldvjQEmc1tPI
eZmqbPKRnsHgCxEzhPeGXirkeOSGT79XFiGfLgSLp5FBp823Mkwi21JulJ+vmqzz
8dfyldNTWLM0LJJK/+lgWtpe62bXHFz8c1tS/BY6N6NC6fJjO4a7n2VkY00B7vd4
0HI=
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:59:40 2025 by rpki-client